The script was called sshrd.sh . Short for “SSH Rapid Deployment.” She’d written it years ago as a joke, a way to push her dotfiles and a rescue toolkit to any server she could SSH into. It was a dumb, beautiful hack: one script that turned any SSH session into a backdoor pipeline. You’d run it on your local machine, it would ssh into a target, scp a payload, and then ssh again to execute it. Crude. Elegant. Dangerous.
She hit Enter.
Thirty seconds felt like thirty years.
But this time, she’d added a twist. The restore_toolkit contained not just backup utilities, but a decoy: a small, self-deleting worm that would mimic the ransomware’s beacon—reporting back to the attacker’s C2 that the bastion was also dead. A lie wrapped in an SSH tunnel, delivered by her own homemade script.